Acrisure

Third Party Risk Manager

Acrisure

full-time

Posted on:

Location Type: Office

Location: Grand Rapids • Illinois, Massachusetts, Missouri, New York, Texas • 🇺🇸 United States

Visit company website
AI Apply
Apply

Salary

💰 $112,000 - $151,000 per year

Job Level

SeniorLead

About the role

  • Design and implement a best-in-class third-party risk management framework, including vendor identification, evaluation and selection, risk assessment, risk decision, contracting and procurement, and reporting and record-keeping.
  • Own the third-party lifecycle process, including onboarding, risk tiering, contract reviews, ongoing monitoring, and exit strategies.
  • Partnering with ‘first line’ teams to provide guidance and oversight in the assessment of third parties, including new and existing third-party relationships, by embedding good risk practices and finding solutions to problems, identifying risks and recommending controls.
  • Playing a key role in the management of third-party related risk incidents and issues that occur.
  • Supporting the development and implementation of a third-party risk policy, standards, procedures, training materials, key risk indicators, key performance indicators and appetite statements.
  • Conducting in-depth reviews of different areas of the business and reporting on third-party risk matters to oversight committees, internal stakeholders and external stakeholders.
  • Analyze the business processes to evaluate the effectiveness of the relevant third-party controls.
  • Lead and document due diligence processes (e.g., questionnaires, risk reviews).
  • Promote development of educational guidance & resources.
  • Ensure quality standards are achieved in development and maintenance of program documentation.
  • Collaborate with legal and compliance teams to address regulatory requirements.
  • Act as a liaison with regulatory bodies, auditors, and other external stakeholders regarding risk management practices and compliance matters.
  • Identify, track, and escalate vendor-related incidents or issues; manage risk remediation plans.

Requirements

  • Minimum of 7-10 years of experience in third party risk management, vendor governance, or enterprise risk
  • Bachelor's or advanced degree in a relevant field (e.g., Risk Management, Business Administration).
  • Working knowledge of commercial insurance, preferred
  • Strong knowledge of relevant regulations and industry standards.
  • Excellent leadership and team management skills.
  • Effective communication and interpersonal skills.
  • Ability to build dashboards, executive reports, and board-level summaries.
  • Comfortable presenting KRI/KPIs, risk heatmaps, and issue trends.
  • Proficiency in Microsoft Office applications (Word, Excel, PowerPoint, Outlook)
  • Experience with third-party assessment platforms (i.e. OneTrust, AuditBoard, etc.)
  • GRC implementation experience.
Benefits
  • Competitive compensation
  • Generous vacation policy
  • paid holidays, and paid sick time
  • Medical Insurance, Dental Insurance, and Vision Insurance (employee-paid)
  • Company-paid Short-Term and Long-Term Disability Insurance
  • Company-paid Group Life insurance
  • Company-paid Employee Assistance Program (EAP) and Calm App subscription
  • Employee-paid Pet Insurance and optional supplemental insurance coverage
  • Vested 401(k) with company match and financial wellness programs
  • Flexible Spending Account (FSA), Health Savings Account (HSA) and commuter benefits options
  • Paid maternity leave, paid paternity leave, and fertility benefits
  • Career growth and learning opportunities
  • …and so much more!

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard skills
third-party risk managementvendor governanceenterprise riskcommercial insurancerisk assessmentcontract reviewsdue diligence processesKRIKPIGRC implementation
Soft skills
leadershipteam managementcommunicationinterpersonal skillsproblem-solvingcollaborationguidanceoversightreportingeducational resource development